Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2de5919db3bc3c6d3c19288157b50e266872f484159a52b2662d175530d84840.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2de5919db3bc3c6d3c19288157b50e266872f484159a52b2662d175530d84840.exe
Resource
win10v2004-20220901-en
Target
2de5919db3bc3c6d3c19288157b50e266872f484159a52b2662d175530d84840
Size
602KB
MD5
215d345436867cab1ef4cd89ef51ae00
SHA1
d42d3342ca50c68d943d1c1285f11339818a9857
SHA256
2de5919db3bc3c6d3c19288157b50e266872f484159a52b2662d175530d84840
SHA512
527b350fafd76a51a6505dad6a65bdb9683b92d61152dd15f2f032263d71fd726e87c857e672c09f359045c2da3a83426b48913a39ce00f5094e36f87225498b
SSDEEP
12288:FioSsdeVZgseBvhht5nxs/aYCaU4fyROyx2berhAw72Ms:Fio0Lezdco4fQMSrhny
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetDebugErrorLevel
AdjustWindowRectEx
DispatchMessageA
MenuItemFromPoint
EnumDisplaySettingsA
GetScrollRange
SetClipboardData
GetScrollBarInfo
EnableMenuItem
ChangeDisplaySettingsExA
GetMouseMovePointsEx
ShowStartGlass
DialogBoxParamW
ChangeMenuA
LoadMenuW
DlgDirSelectExA
DestroyWindow
GetClipboardViewer
SubtractRect
InsertMenuItemW
ChildWindowFromPointEx
RegisterDeviceNotificationW
DestroyAcceleratorTable
ShowCursor
IntersectRect
CopyAcceleratorTableW
ScrollWindow
GetAltTabInfoW
OpenIcon
ChangeDisplaySettingsExW
CloseClipboard
CharUpperBuffA
MessageBeep
LockWindowUpdate
LoadImageA
GetClientRect
CreateCursor
IsCharAlphaNumericW
EnumPropsW
CheckMenuRadioItem
SetCursor
DestroyCursor
GetWindowTextLengthW
TileWindows
GetAncestor
GetClassNameW
CreateDialogIndirectParamW
SetCaretPos
LoadAcceleratorsW
DialogBoxParamA
GetDlgItemTextA
SendMessageCallbackW
GetUpdateRect
GetCursor
GetAltTabInfoA
LoadBitmapA
EnumDesktopsW
InsertMenuW
DrawTextExA
BroadcastSystemMessageW
GetWindowTextA
SetCaretPos
AnyPopup
WriteFileEx
GetProcessShutdownParameters
LZCopy
GetConsoleHardwareState
GetCurrencyFormatA
MultiByteToWideChar
LocalUnlock
OpenEventW
GetExpandedNameW
GenerateConsoleCtrlEvent
GetBinaryTypeW
SetProcessAffinityMask
LCMapStringA
EnumLanguageGroupLocalesW
AllocConsole
lstrcmpW
GetStringTypeExW
InterlockedExchangeAdd
GetModuleFileNameA
GlobalFindAtomW
GetCurrentConsoleFont
DelayLoadFailureHook
GetComputerNameExA
VirtualFreeEx
GetConsoleCP
OutputDebugStringW
GetProcessWorkingSetSize
LZRead
GetSystemDirectoryA
AllocateUserPhysicalPages
MoveFileA
Sleep
EndUpdateResourceA
BackupSeek
EnumCalendarInfoExW
HeapCompact
GetConsoleCursorInfo
AddAtomA
lstrlenW
ReleaseSemaphore
GlobalAddAtomW
ReadDirectoryChangesW
GlobalDeleteAtom
GlobalSize
LockFileEx
CreateConsoleScreenBuffer
GetNumberFormatW
ConvertDefaultLocale
GetLastError
GetProcessHeap
SetDefaultCommConfigA
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetFileTitleW
dwLBSubclass
ReplaceTextW
SafeArrayGetRecordInfo
VarI8FromCy
VarUI8FromR8
VarI8FromUI1
WaitForPrinterChange
EnumICMProfilesA
PolyDraw
SetMapperFlags
ExcludeClipRect
VerInstallFileW
VerLanguageNameW
ntohl
WSAAsyncGetServByName
ImageList_DragEnter
MenuHelp
�a�t��6�PI��&�X�����e䏙�l��K����1*x���J�c���<����_y����l����J�8��g�l�ۄ3!����@���r��|�#/S�u�{���~Mr@��W*�7Z�L�,�o��R�����SW�b������Z���5�ŗ|�����}#�⤅���R��Kh�vZ�a��k� �Z��.�s��AV��k6�Y�ݦ�.$�d��'n4����JU��c ��$[-����xt~pp�4�ַz���.�"��Ly�j�`���JI_7�[��EU���*C)��aY�n�m� 뀓���H� ���7)�@���"W�� ��2�`���[�j��D>kNa��x��14Џ��D�^��ر���p���7C@��� ���K[���$�}֍ �կX�W�u>2N��ݮu�� o�%a���7���^��-BZX�[��g)��㻒%Ɇ6!c��F*s�fP`#�����v���~�F�^f��Q+��Z�V���e��m P._������)a��S��&�'Wk���j"}}��8�OOڥ�2���`��'�͚���6��A�#2I�t#y�7=T�PgQ�.��" j���{{��9g���r9�)��,��5b ��r~�ݎi��~���V:��T����ث{�SKm�]��Jx��po-k1�dg�*15w ���Q��2�1�*��2�{�ւ���(W�t�7N �~�����<��<h���6&?�Rhm��&��q�K���XϢh"�d�F��zu ��+��%�1g* ��7������LbpZwk��hUyl>��1�C>t�k�$�'�hcd����F���g^d�M�J�|��Vd�ӣ�VQE��yI,)�����W Ώ�`wտ����+ �~J�hb���0�k�Wn�kذq�c��;���-�&Z����C��{PI_t?���KR�s�r �OM����i���@2pd*� �َ�mk����ʣ��p��꾎�=�𦂤J�Ӟ�������C�D�&�%��J�N��>�3�)�+�|�XB7�R��8��ٯ�AIO��wT�Q��"0��>獝�R"�\�W�KcW�A���.*Σd��?1bz���?���{�ʄA�3��i;a�QOk|��F) ��WRc�o$3N�ލ6;�G�� i�WX1�^���1T��� lW����V��xM�%(�����֢�'�?�:fg=i�L#��i��c����,o02�U�Б �xd���d��4r�*$5u�����&. ��U��E���4mт��Ib�^5��Ԙ9���"��Yݗ5��f p��c�$�-�W��x>o����FnK�!j�����͝ڵ��U��\Cu�ML"���n�}��|Y�?�q�]F��3���_ ����hы�72�����nm\,9�-��z�~�$MJ\t���� ]on��[M�Z�����kݔ+Z��@U��rq�����f�����ܳ��!K�\��݅��#l��X��� V��V�#O� �%�u��'d��� e�t�$����<`��� ��еC�ˌ����վ�P�'O��q�o���K��/�D4<*/��W��������1��Kދ��0���#�V��D�1]I�ϭ4>s��� w��t�-{��^8���Hv����h���4�S����4ј��j$�3qϚ������ ���陕�0:u�z�~�23$���[Y�앝��B������X��gG����O㫔��W�10 ���Ԁ|Y��&�F ��k�Y�.G��4<�CF=��TG:�ʲbC����Qpƾ�qf���f�x%��Ta��9~�pF�ו%5{���ž�н^or�Jxm� !|BaI��Y���MZ�spug6���'��%Z�@[?�(����WZ���Q��,��KU���]k��bl�� Vpt�}�u�� ق�w4u>��V����U����:ї������g �����+�o�� u���ր*�1K�Y��z��O�%���]�^т^�t��/��+��^��XF]�Fn˯�����������P��_�U q���G���ؗiG���u t��j'���c�D6�(�����!������>�����#��8X4�7����4(�"H�\�Z��!^�D���*��x)ғ��xZ}�덪�3X�g��T��fӍ�hOM��^��`���vOos�I�ɟ'`\�7������3�zK4���[0��#�]˃���[�+���������B�y�I�҆*��� 诼�K�)5�]ZIh���H^����~mW���� ����簰�0T�C��2��S,(�>L��薚�ϻ^��0�C�'Cf�ծ���hHt�fYv1k}�<�j�D�v��- ��1��d`Y���/��z�u�Пr�O:��ZF�5��fB69�����<�δ���g��E��DŽ���s|��~XL���p-ʳ{�IPǚA�������Q���R���Gf��k �a���kgJC�2��ŭ�%PnC����W(a� 3�31I�Q;--w���j�ԉ�e]�ヲ�Z>{;�I�}D pL�Fw ��'��yB�"U6�.���thL�$A^4�}�;�Xi��.)�f�[����)��a09382\z2�a��l���à��>!L�1tʰ�?�,,,��=O��mE�����fz���C�DenE�ʺ���d#C��K|�� 2���)9`�H������Z�����e�"�X_�h��y��6�ʮt�;i�(�aT(|���O����|�;y��#�-�M�����b{�@=G|`�hhd`b��"k�p���ne�E~#p�kI��5mT��˶�L�F����-j�So�=��d7��b��X��@�sC�k�gF%|#!�b[���2*� Z�����c[����r�_2�忼V�ݪ� ���k��%��녻a��}�R���+�(�?}�a�5q��3��u����� %X�/NȨ�LL�p&��\S��t�M7�o�]Gd�[��e=ͼ�L!H6�5�[j��a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ